Schema merge requestshttps://community.opengroup.org/osdu/platform/system/schema-service/-/merge_requests2023-08-18T21:55:05Zhttps://community.opengroup.org/osdu/platform/system/schema-service/-/merge_requests/480Revert "Merge branch 'GONGR-6885-reduce_requests_according_to_VPA' into 'mast...2023-08-18T21:55:05ZOleksandr Kosse (EPAM)Revert "Merge branch 'GONGR-6885-reduce_requests_according_to_VPA' into 'master'"This reverts merge request !478This reverts merge request !478M18 - Release 0.21https://community.opengroup.org/osdu/platform/system/schema-service/-/merge_requests/478GONGR-6885 Reduce requests according to VPA2023-08-18T21:55:07ZAndriy Halka [EPAM / GCP]GONGR-6885 Reduce requests according to VPAM18 - Release 0.21https://community.opengroup.org/osdu/platform/system/schema-service/-/merge_requests/477Merge azure/cherrypick-m14-m16 to azure/m16-master2023-04-24T17:04:46ZOsborn ChenMerge azure/cherrypick-m14-m16 to azure/m16-master(cherry picked from commit b726d1d2d85230dd495ad1a858ee06b6ad5c414c)(cherry picked from commit b726d1d2d85230dd495ad1a858ee06b6ad5c414c)https://community.opengroup.org/osdu/platform/system/schema-service/-/merge_requests/476Update NOTICE, remove snapshot2023-04-13T20:28:10ZChad LeongUpdate NOTICE, remove snapshotUpdate FOSSA notice, remove SNAPSHOT dependenciesUpdate FOSSA notice, remove SNAPSHOT dependenciesM17 - Release 0.20https://community.opengroup.org/osdu/platform/system/schema-service/-/merge_requests/475Cherry-pick 'OpenAPI 3.0 Documentation using springdoc' into release/0.202023-04-11T09:37:33ZDavid Diederichd.diederich@opengroup.orgCherry-pick 'OpenAPI 3.0 Documentation using springdoc' into release/0.20**Original MR**: !470
### This MR is a Cherry Pick into a Release Branch.
After the release branch is first created, any subsequent changes use this process to update the release (often resulting in a new patch tag) without incorporati...**Original MR**: !470
### This MR is a Cherry Pick into a Release Branch.
After the release branch is first created, any subsequent changes use this process to update the release (often resulting in a new patch tag) without incorporating all changes in the default branch.
These MRs must be approved by the PMC before they are merged, since they alter the scope of the release.
To see more details about the change itself, look at the Original MR listed above.
#### Skipped Pipeline
Normally, pipelines are not executed on the cherry pick branch/MR prior to merging.
This optimization is accepted because the code was tested when it merged into the default branch, and will be tested again in the release branch prior to tagging.
However, if anybody feels that the MR requires further scrutiny -- whether because it had conflicts in the cherry-picking, it interfaces with some drastically altered logic between the branches, or any other reason -- we can run the pipeline here prior to merging.
#### If There's Reason to Run a Pipeline
If you want to see a pipeline result before this merges, first add a comment explaining why you'd like to see the pipeline results so the PMC and others know your thinking.
Then, mark the MR as a Draft MR (using the vertical ellipsis above, choose 'Mark as Draft').
This prevents the MR from being approved & merged accidentally by a busy release coordinator who didn't see your comment.
Finally, if you are a maintainer on the project, launch a pipeline on this branch.
Since this branch is a protected branch and the MR has ~no-detached-pipeline set, all integration tests will run and there's no need for any `trusted-*` branches.
[Launch a Pipeline for this Branch](https://community.opengroup.org/osdu/platform/system/schema-service/-/pipelines/new?ref=cherry-pick-for-470)M17 - Release 0.20David Diederichd.diederich@opengroup.orgChad LeongSrinivasan NarayananDavid Diederichd.diederich@opengroup.orghttps://community.opengroup.org/osdu/platform/system/schema-service/-/merge_requests/473modify bootstrap to push image to msosdu registry2023-08-18T21:55:08Zsaketh somarajumodify bootstrap to push image to msosdu registry- Currently schema bootstrapping for demo and preship envs are being done by running container locally
- This MR supports azure-devops pipeline to automate schema bootstrapping for demo and preship envs
- Add script to azure_bootstrap jo...- Currently schema bootstrapping for demo and preship envs are being done by running container locally
- This MR supports azure-devops pipeline to automate schema bootstrapping for demo and preship envs
- Add script to azure_bootstrap job to push image to msosdu registry.M18 - Release 0.21saketh somarajusaketh somarajuhttps://community.opengroup.org/osdu/platform/system/schema-service/-/merge_requests/472AWS Integration merge2023-04-06T01:25:56ZManish JangidAWS Integration mergeAWS Integration mergeAWS Integration mergeM18 - Release 0.21https://community.opengroup.org/osdu/platform/system/schema-service/-/merge_requests/471Cherry-pick 'Fix Azure integration tests' into release/0.202023-04-07T05:24:12ZDavid Diederichd.diederich@opengroup.orgCherry-pick 'Fix Azure integration tests' into release/0.20**Original MR**: !469
### This MR is a Cherry Pick into a Release Branch.
After the release branch is first created, any subsequent changes use this process to update the release (often resulting in a new patch tag) without incorporati...**Original MR**: !469
### This MR is a Cherry Pick into a Release Branch.
After the release branch is first created, any subsequent changes use this process to update the release (often resulting in a new patch tag) without incorporating all changes in the default branch.
These MRs must be approved by the PMC before they are merged, since they alter the scope of the release.
To see more details about the change itself, look at the Original MR listed above.
#### Skipped Pipeline
Normally, pipelines are not executed on the cherry pick branch/MR prior to merging.
This optimization is accepted because the code was tested when it merged into the default branch, and will be tested again in the release branch prior to tagging.
However, if anybody feels that the MR requires further scrutiny -- whether because it had conflicts in the cherry-picking, it interfaces with some drastically altered logic between the branches, or any other reason -- we can run the pipeline here prior to merging.
#### If There's Reason to Run a Pipeline
If you want to see a pipeline result before this merges, first add a comment explaining why you'd like to see the pipeline results so the PMC and others know your thinking.
Then, mark the MR as a Draft MR (using the vertical ellipsis above, choose 'Mark as Draft').
This prevents the MR from being approved & merged accidentally by a busy release coordinator who didn't see your comment.
Finally, if you are a maintainer on the project, launch a pipeline on this branch.
Since this branch is a protected branch and the MR has ~no-detached-pipeline set, all integration tests will run and there's no need for any `trusted-*` branches.
[Launch a Pipeline for this Branch](https://community.opengroup.org/osdu/platform/system/schema-service/-/pipelines/new?ref=cherry-pick-for-469)M17 - Release 0.20David Diederichd.diederich@opengroup.orgChad LeongSrinivasan NarayananDavid Diederichd.diederich@opengroup.orghttps://community.opengroup.org/osdu/platform/system/schema-service/-/merge_requests/470OpenAPI 3.0 Documentation using springdoc2023-04-11T09:30:58ZThulasi Dass SubramanianOpenAPI 3.0 Documentation using springdoc**Link to ADR(Architecture Decision Record)** : [Swagger using springdoc-openapi](https://community.opengroup.org/osdu/platform/system/home/-/issues/97)
## OpenAPI 3.0 related changes
* upgraded to latest **springdoc openapi** latest v...**Link to ADR(Architecture Decision Record)** : [Swagger using springdoc-openapi](https://community.opengroup.org/osdu/platform/system/home/-/issues/97)
## OpenAPI 3.0 related changes
* upgraded to latest **springdoc openapi** latest version [1.6.14](https://mvnrepository.com/artifact/org.springdoc/springdoc-openapi-ui/1.6.14)
* used **[@OpenAPIDefinition](https://docs.swagger.io/swagger-core/v2.0.9/apidocs/io/swagger/v3/oas/annotations/OpenAPIDefinition.html)** annotation to populate OpenAPI Object fields *\[info, tags, servers, security\]*
* Documented the below API's with OpenAPI 3.0 **Annotations**
- Schema API
- System Schema API
- Info API
* Added the standard HTTP Response(4xx, 5x\*\*\*\*x) for API Responses
* Custom Path for
* **Swagger UI**: https://host/context-path/swagger (will redirect to https://host/context-path/swagger-ui/index.html)
* **api-docs (JSON)** : https://host/context-path/api-docs
* **api-docs (YAML)** : https://host/context-path/api-docs.yaml
* Azure Swagger GLAB(for Reference)
* **Swagger UI**: https://osdu-glab.msft-osdu-test.org/api/schema-service/v1/swagger (will redirect to https://osdu-glab.msft-osdu-test.org/api/schema-service/v1/swagger-ui/index.html)
* **api-docs (JSON)** : https://osdu-glab.msft-osdu-test.org/api/schema-service/v1/api-docs
* **api-docs (YAML)** :https://osdu-glab.msft-osdu-test.org/api/schema-service/v1/api-docs.yaml
## Other Changes
- **Configurable** descriptions managed in [swagger.properties](https://community.opengroup.org/osdu/platform/system/partition/-/blob/az/td-oas/partition-core/src/main/resources/swagger.properties)
- Deleted HomeController
- Marked the 'WhoamiController' as 'Hidden' for documentation
- Updated Readme for swagger related information
## References
- https://springdoc.org/faq.html#_can_i_use_spring_property_with_swagger_annotations
- https://springdoc.org/migrating-from-springfox.htmlM17 - Release 0.20Thulasi Dass SubramanianThulasi Dass Subramanianhttps://community.opengroup.org/osdu/platform/system/schema-service/-/merge_requests/469Fix Azure integration tests2023-06-05T14:37:29ZDeepa KumariFix Azure integration testsAzure had duplicated steps and data in int tests folder and some were out of sync from core.
Keeping the tests from core only.Azure had duplicated steps and data in int tests folder and some were out of sync from core.
Keeping the tests from core only.M17 - Release 0.20Deepa KumariDeepa Kumarihttps://community.opengroup.org/osdu/platform/system/schema-service/-/merge_requests/468Continue build if dependency-maven-check failed2023-03-30T17:21:22ZYash DholakiaContinue build if dependency-maven-check failedContinue build if dependency-maven-check failed. It fails when nvd.nist is down.Continue build if dependency-maven-check failed. It fails when nvd.nist is down.M17 - Release 0.20Okoun-Ola Fabien HouetoOkoun-Ola Fabien Houetohttps://community.opengroup.org/osdu/platform/system/schema-service/-/merge_requests/466Vulnerability fix for IBM2023-03-31T09:48:47ZDevdatta SantraVulnerability fix for IBMVulnerability fix for IBM for jackson and netty libs
| CVE-2022-42004 | https://nvd.nist.gov/vuln/detail/CVE-2022-42004 |
|----------------|-------------------------------------------------|
| CVE-2022-42003 | https://nvd.nist.gov/vuln/...Vulnerability fix for IBM for jackson and netty libs
| CVE-2022-42004 | https://nvd.nist.gov/vuln/detail/CVE-2022-42004 |
|----------------|-------------------------------------------------|
| CVE-2022-42003 | https://nvd.nist.gov/vuln/detail/CVE-2022-42003 |
| CVE-2022-41881 | https://nvd.nist.gov/vuln/detail/CVE-2022-41881 |M17 - Release 0.20Devdatta SantraDevdatta Santrahttps://community.opengroup.org/osdu/platform/system/schema-service/-/merge_requests/465Critical spring Security vulnerability fixes for azure2023-07-25T07:11:24ZJayesh BagulCritical spring Security vulnerability fixes for azureSpring Security authorization rules bypass vulnerability that was discovered
in https://community.opengroup.org/osdu/platform/system/schema-service/-/security/vulnerabilities/27351
Updated the non-vulnerable version.Spring Security authorization rules bypass vulnerability that was discovered
in https://community.opengroup.org/osdu/platform/system/schema-service/-/security/vulnerabilities/27351
Updated the non-vulnerable version.M17 - Release 0.20Jayesh BagulJayesh Bagulhttps://community.opengroup.org/osdu/platform/system/schema-service/-/merge_requests/464Gc schema migration (GONRG-6799 & GONRG-6772)2023-03-29T09:12:18ZRustam Lotsmanenko (EPAM)rustam_lotsmanenko@epam.comGc schema migration (GONRG-6799 & GONRG-6772)Due to changes in Schema (https://community.opengroup.org/osdu/platform/system/schema-service/-/merge_requests/444)
update from v0.19 to a higher version will cause "loss" of the existing private schemas.
We need to create a migration s...Due to changes in Schema (https://community.opengroup.org/osdu/platform/system/schema-service/-/merge_requests/444)
update from v0.19 to a higher version will cause "loss" of the existing private schemas.
We need to create a migration script to move/rename these existing private schemas to a new namespace.
This script should be a part of a bootstrap process.M17 - Release 0.20Rustam Lotsmanenko (EPAM)rustam_lotsmanenko@epam.comRustam Lotsmanenko (EPAM)rustam_lotsmanenko@epam.comhttps://community.opengroup.org/osdu/platform/system/schema-service/-/merge_requests/461[GONRG-6649] Define global vars in schema2023-03-24T09:39:54ZOleksandr Kosse (EPAM)[GONRG-6649] Define global vars in schemaM17 - Release 0.20https://community.opengroup.org/osdu/platform/system/schema-service/-/merge_requests/460Renaming dependency helm chart repo to osdu-aws and removing versioning const...2023-03-17T19:47:09ZMarc Burnie [AWS]Renaming dependency helm chart repo to osdu-aws and removing versioning constraintsM17 - Release 0.20Marc Burnie [AWS]Marc Burnie [AWS]https://community.opengroup.org/osdu/platform/system/schema-service/-/merge_requests/459Update MongoDB settings2023-03-17T17:31:18ZAleh Shubko [EPAM]Update MongoDB settingsM17 - Release 0.20Marc Burnie [AWS]Marc Burnie [AWS]https://community.opengroup.org/osdu/platform/system/schema-service/-/merge_requests/458Resolve "OSDU-DD-Delivery-M17 (v0.20.0)"2023-03-29T13:47:37ZThomas Gehrmann [slb]Resolve "OSDU-DD-Delivery-M17 (v0.20.0)"Resources to bootstrap M17 v0.20 schemas provided by OSDU Data Definitions.
DD schema repo commit SHA 2a35e50d287f26ea98d4f2bbab0ebfd12e1c6723
Closes #125Resources to bootstrap M17 v0.20 schemas provided by OSDU Data Definitions.
DD schema repo commit SHA 2a35e50d287f26ea98d4f2bbab0ebfd12e1c6723
Closes #125M17 - Release 0.20Thomas Gehrmann [slb]Thomas Gehrmann [slb]https://community.opengroup.org/osdu/platform/system/schema-service/-/merge_requests/457Add switch terraform parameter for MongoDB2023-03-16T13:23:48ZAleh Shubko [EPAM]Add switch terraform parameter for MongoDBAWS DevOps Changes OnlyAWS DevOps Changes OnlyM17 - Release 0.20Aleh Shubko [EPAM]Marc Burnie [AWS]Aleh Shubko [EPAM]https://community.opengroup.org/osdu/platform/system/schema-service/-/merge_requests/456Vulnerability fixes for Spring Security (azure)2023-07-25T07:11:24ZJayesh BagulVulnerability fixes for Spring Security (azure)1) vulnerability fixes for spring-security-core in azure (IssueID: 126)
Authorization bypass in Spring Security in org.springframework.security/spring-security-core
Issue created from vulnerability [21546](https://community.o...1) vulnerability fixes for spring-security-core in azure (IssueID: 126)
Authorization bypass in Spring Security in org.springframework.security/spring-security-core
Issue created from vulnerability [21546](https://community.opengroup.org/osdu/platform/system/schema-service/-/security/vulnerabilities/21546)
Issue:
https://community.opengroup.org/osdu/platform/system/schema-service/-/issues/126M17 - Release 0.20Jayesh BagulJayesh Bagul